186 matches found
F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection
OVERVIEW F5 FirePass SSL VPN is vulnerable to Open URL Redirection. 2. BACKGROUND F5 FirePass SSL VPN provides secure remote access to enterprise applications and data for users over any device or network while protecting your corporate. See http://www.f5.com/pdf/products/firepass-overview.pdf...
Hacker group RedHack faces up to 24 years in prison for terrorist crimes
As part of an investigation launched by Başsavcıvekilliği in Ankara on March 20 arrested seven people, including college students. 13 of the indictment prepared by the prosecutor's office in Ankara Was adopted by the High Criminal Court. Court has accepted an indictment against RedHack, a Turkish...
Microsoft FixIt Will Address IE Zero-Day Vulnerability
With Internet Explorer users still exposed to as many as four active exploits of a zero-day vulnerability in the browser, Microsoft Tuesday night said it will release a FixIt in the next couple of days that will address the issue. A FixIt is an automated tool provided by Microsoft that diagnoses...
ocPortal CMS 7.1.5 Open Redirect
OVERVIEW ocPoral CMS 7.1.5 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND ocPortal is the website Content Management System a CMS for building and maintaining a dynamic website. ocPortal's powerful feature-set means there's always a way to accomplish your vision. Not...
Library of Congress Owned
There are a number of US government branches, offices, and agencies that, by their very nature, have giant targets painted on their computer networks. America’s national library would not seem to be among that lot, but alas, not even the Library of Congress could escape the ire of hackers this...
Two Members of LulzSec Plead Guilty to Cyber Crimes
Two members of the hacker group Lulz Security LulzSec pleaded guilty today to taking part in a cyber crime spree that launched attacks against Web sites belonging to law enforcement, corporations and media companies. Ryan Cleary, 20, of Wickford, Essex and Jake Davis, 19, of Lerwick, Shetland...
o0mBBS <= 0.65B Remote File Upload
Exploit for asp platform in category web applications Exploit Title: o0mBBS !Muslims!,Mosta,team152,Inj3ct0r And all my Freinds + Algerian Hackers -----------------------------------------------------+ DzMafia © 2012 All rights reserved. 0day.today 2018-04-12...
Hacker claims to hack European Space Agency, NASA, US Air Force and Military, French Ministry of Defence
Hacker claims to hack European Space Agency, NASA, US Air Force and Military, French Ministry of Defence Hackers with group name "The Unknowns" claimed to Hack European Space Agency, NASA, US military, US Air Force, Harvard.Renault Company, French Ministry of Defence, Bahrain Ministry of Defecene...
FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities
OVERVIEW Fastpath WebChat is vulnerable to Cross Site Scripting. 2. BACKGROUND Fastpath WebChat is part of the Fastpath product. It provides a way for users to begin chatting with support agents using Fastpath. Fastpath is a plugin of OpenFire, a real time collaboration RTC server for instant...
Joomla Beatz 1.x Cross Site Scripting
OVERVIEW Beatz 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Beatz is a set of powerful Social Networking Script Joomla! 1.5 plugins that allows you to start your own favourite artist band website. Although it is just a Joomla! plugin, it comes with full Joolma! bundle for...
Anonymous Deface page - "POPE is not welcome, out out!!!!!"
Anonymous Deface page - "POPE is not welcome, out out!!!!!" Anonymous blocked access to two websites linked to the upcoming visit to Mexico by Pope Benedict XVI. Anonymous Hispano, the hackers succeeded in temporarily knocking the websites offline and defacing them with their own message: "Hacked...
Hacker Group Breaches Library of Congress Site, Publishes Passwords
A group of hackers claims to have breached the official website of the Library of Congress, America’s national library. The group claiming responsibility, BlitzSec, decried the wildly unpopular US Congress and said it used a SQL injection attack to access the Library of Congress Website’s back en...
CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability [Updated]
OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...
OxWall 1.1.1 <= Multiple Cross Site Scripting Vulnerabilities
OVERVIEW OxWall 1.1.1 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Oxwall is a free open source software package for building social networks, family sites and collaboration systems. It is a flexible community website engine developed with the aim to provide people...
United States Census Bureau Hacked and Vulnerability Exposed
United States Census Bureau Hacked and Vulnerability Exposed A Group of Hackers from r00tw0rm found SQL injection Vulnerability on United States Census Bureau,0x3a,user\,0x3a,database\,4,5,groupconcat\tablename+from+informationschema.tables--+ and Hackers successfully exploit the Database and...
ProCredit Bank Georgia hacked by RetnOHacK
ProCredit Bank Georgia hacked by RetnOHacK AntiSerbs Group of Hackers named - B!JemBeX, RetnOHacK, Weedh0aX, mR.Thg hack into ProCredit Bank of Georgia procreditbank.ge . They Deface the Administrator panel page located at as shown in image attached. On Deface page Hacker said "This day have...
President of Guyana's Website defaced by Hackers
President of Guyana 's Website defaced by Hackers The Official Website of President of Guyana's Website defaced by some hackers belongs to Group called "The Hackers Army " ."To the ignorant observer Israel may appear modern, vigorous and democratic largely thanks to the outrageous bias in Western...
International Association of Chiefs of Police Investigators Owned by Anonymous Hackers
International Association of Chiefs of Police Investigators Owned by Anonymous Hackers The Antisec wing of Anonymous has come out with another document release in its ongoing assault on law enforcement. A Special Agent Supervisor of the CA Department of Justice is the latest victim of Anonymous w...
Bangladesh Supreme Court website hacked
Bangladesh Supreme Court website hacked The official website of the Supreme Court was hacked yesterday.Information technology experts of the court, however, recovered it around 8:00pm. According to the message posted on the site, the hackers identified themselves as "Bangladeshi UnderGround Hacke...
Hacker selling compromised websites gets hacked by d33ds
Hacker selling compromised websites gets hacked by d33ds A hacking group called d33ds broke into the online shop of a rival hacker who sells unauthorized access to high-profile websites and data. A hacker calling himself Srblche , also offered information stolen from websites belonging to the U.S...